mkt.esdm.com.br

Issued by R3

About this certificate

This digital certificate with serial number 04:96:fa:16:bb:55:90:e1:d2:6b:4f:9d:cc:bc:6c:d2:46:8c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mkt.esdm.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:96:fa:16:bb:55:90:e1:d2:6b:4f:9d:cc:bc:6c:d2:46:8c
Serial Number (int): 399823923794248701380410593501055521277580
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 35:91:81:50:21:d3:29:3e:64:5f:73:a6:d3:ff:f2:8f:61:e0:e9:eb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6f:f2:92:3a:2b:e4:43:6a:08:09:5f:67:24:a4:0c:f3:30:0a:5a:46
Fingerprint (sha256): 2f:13:a4:fc:b6:f6:29:9d:64:dc:fa:c0:37:56:e3:29:23:fa:a4:a2:cc:ea:9c:98:0a:18:d4:6b:e2:4e:f5:b9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mkt.esdm.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mkt.esdm.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

anuncio.srbbancodenegocios.com.br
app.duasparaum.com
avisos.moedagamer.com.br
campanhas.cca.com.br
cml.unimedcuritiba.com.br
egoi.egosto.pt
listas.siteo.one
marketing.sistemadivinaprovidencia.org
mkt.4gaming.pt
mkt.abaco.academy
mkt.adene.pt
mkt.admatosinhos.pt
mkt.albinofsousa.com
mkt.aleksandrericardo.com.br
mkt.apsa.org.pt
mkt.aran.pt
mkt.bazardovideo.biz
mkt.bazardovideo.pt
mkt.bdeimagem.com.br
mkt.brvmoveis.com.br
mkt.carglass.pt
mkt.casamariademagdala.org
mkt.catim.pt
mkt.cenedcursos.com.br
mkt.comocontrolaradiabetes.com
mkt.cosmeticsonline.com.br
mkt.createbusiness.es
mkt.createbusiness.pt
mkt.crion.es
mkt.crion.pt
mkt.danielfunchal.com.br
mkt.dstsgps.com
mkt.edeba.pt
mkt.elementsmosaic.pt
mkt.elzaburu.es
mkt.endosfera.net
mkt.escoladopodcast.com
mkt.esdm.com.br
mkt.fajota.pt
mkt.fcblegal.com
mkt.fne.pt
mkt.fourheka.pt
mkt.funchalacademy.com.br
mkt.ganheagora.com
mkt.graficasobreirense.com
mkt.greenfever.pt
mkt.grupoautoindustrial.pt
mkt.grupordo.com.br
mkt.grupotiempoactivo.com
mkt.hospital-vilaverde.com
mkt.icjp.pt
mkt.impresa.pt
mkt.innovpoint.com
mkt.integrasys.pt
mkt.ionlab.com.br
mkt.ipnaturologia.com
mkt.jpleitao.pt
mkt.kassanel.com
mkt.lojaglamourosa.com
mkt.lvengine.com
mkt.makeawish.pt
mkt.mdaccula.com
mkt.mediatailors.pt
mkt.municipioseixal.com
mkt.mvituzzo.com.br
mkt.ndcengenharia.pt
mkt.nrms-designs.com
mkt.nunopereirahairstudio.com
mkt.onne.pt
mkt.optec.pt
mkt.oruspay.com.br
mkt.peticaodireito.com.br
mkt.plusrepair.com
mkt.prosistav.pt
mkt.rentacesso.pt
mkt.rolear.pt
mkt.rolearmais.pt
mkt.santodecasa.net
mkt.scmedia.pt
mkt.seedgo.pt
mkt.siaeg.com.br
mkt.siimgroup.pt
mkt.soupinto.com
mkt.studio387.com
mkt.tiempoactivo.com
mkt.tpf.pt
mkt.tu.purina.es
mkt.ufp.edu.pt
mkt.vasp.pt
mkt.vaysanweb.com
mkt.velirh.com.br
mkt.vidanostrilhos.com.br
mkt.viversaudavel.pt
mkt.voluntarioanimal.com.br
mkt.voluntarioanimal.org
mkt.vpartner.pt
mkt.workview.pt
mkt.worldofdiscoveries.com
news.adstandvirtual.com
news.altamontanha.com

Other certificates including the domain name esdm.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for mkt.esdm.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XC3OSd//+WxOBp5TyB4
PahXMCP/lFcx1+H3FCSDOs4PT+XHA+yk9Zyi1u+l8TeCIl/RSL4CLj5wiz6cBgA/
8eywEVlUdz0u8itLKrwDcNTgdiU8d7jSwPT3wgVENMzyVSwhKYFztWmgqMm5sLks
/pZYfpr2mbwCMlq0hxYSQKgNOiQRhWLS1fYqyHf3OpB904lbJQdGDEf2lOp1t3x2
oHikLOKXeA5bp/8fgPojuYsbzmhkr2jJ3d5tJZ9EfxHl2CRGW4qOo38qrikh/hsj
joAjj0fDLFerBsMvPeYVQlCKoVCx39FRoe0AKyr10ZhhcAPY6H+kXcfq47DeQ/kV
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399823923794248701380410593501055521277580
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-01 01:19:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 01:19:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkt.esdm.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26439387928971160401784744571611669762677698906567796136896282311856458448379621687625013489855268857420998715614078361890937140292417738615149300582826196827025783532466251403676147316573991480361697460177023175669822943690347871591543811142272304990507057191273981449744904913804952473465532321330535428317446403825703134838387621877141949977941350810704416219459630091098581675809614528660319171239387406065211105674644434464211906383189835637344591740711227241456862061221695524637691475542447434265424070177845732698578893064491533603600242807195291823688667269404020548161129492127550056220656134469870937511173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3591815021d3293e645f73a6d3fff28f61e0e9eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2070 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anuncio.srbbancodenegocios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.duasparaum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avisos.moedagamer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campanhas.cca.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cml.unimedcuritiba.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.egosto.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listas.siteo.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.sistemadivinaprovidencia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.4gaming.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.abaco.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.adene.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.admatosinhos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.albinofsousa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aleksandrericardo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.apsa.org.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aran.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bazardovideo.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bazardovideo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bdeimagem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brvmoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.carglass.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.casamariademagdala.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.catim.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cenedcursos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.comocontrolaradiabetes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cosmeticsonline.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.createbusiness.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.createbusiness.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.crion.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.crion.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.danielfunchal.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dstsgps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.edeba.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.elementsmosaic.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.elzaburu.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.endosfera.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.escoladopodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.esdm.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fajota.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fcblegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fne.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fourheka.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.funchalacademy.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ganheagora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.graficasobreirense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.greenfever.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.grupoautoindustrial.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.grupordo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.grupotiempoactivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hospital-vilaverde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.icjp.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.innovpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.integrasys.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ionlab.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ipnaturologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jpleitao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.kassanel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lojaglamourosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lvengine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.makeawish.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mdaccula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mediatailors.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.municipioseixal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mvituzzo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ndcengenharia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nrms-designs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nunopereirahairstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.onne.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.optec.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.oruspay.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.peticaodireito.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.plusrepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.prosistav.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rentacesso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rolear.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rolearmais.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.santodecasa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.scmedia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.seedgo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.siaeg.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.siimgroup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.soupinto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.studio387.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tiempoactivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tpf.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tu.purina.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ufp.edu.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vasp.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vaysanweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.velirh.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vidanostrilhos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.viversaudavel.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.voluntarioanimal.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.voluntarioanimal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vpartner.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.workview.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.worldofdiscoveries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.adstandvirtual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.altamontanha.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a4e8a35c00000040300473045022100e2b98c0a952ddaa7a47e2d8177599de34bb90b9adc41fcbc95b13623daa2ec9e02205d52083316d500cc245cd1efcf4f8d6178be8038911c1ce561319c8c4cd0f89e0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a4e8a35d20000040300463044022072afd569c3b0fb82a467b374fb1c2216828585d935b702725df50384e32055ea02206b0d6db2537a7f1a1652dd301c25f54055f56770d834e02d7f3ad3ea30fbbb7b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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